Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Zero Day Initiative

Cisco Talos

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

AlienVault OTX General

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit BlueTeam

Reddit ThreatIntel

Reddit Malware

Reddit Reverse Engineering

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

A Business Logic vulnerability exists in SourceCodester Pharmacy Product Management System 1.0 in the add-sales.php file. The application fails to verify if the requested sales quantity (txtqty) exceeds the available stock level. An attacker can manipulate the request to purchase a quantity that is significantly higher than the actual available stock.

CVE-2026-30574 identifies a business logic vulnerability in the SourceCodester Pharmacy Product Management System version 1.0, located in the add-sales.php script. The vulnerability arises because the application fails to verify whether the requested sales quantity (parameter txtqty) exceeds the actual available stock level before processing the sale. This lack of validation allows an attacker to submit manipulated requests to purchase quantities far greater than what is physically in stock. The flaw is rooted in insufficient business rule enforcement rather than a technical flaw like buffer overflow or injection. Exploiting this vulnerability can cause the system to record sales that are not feasible, leading to inaccurate inventory data, financial misreporting, and potential disruption of supply chain and restocking processes. Although no known exploits have been reported in the wild, the vulnerability could be leveraged by malicious insiders or external attackers with access to the sales interface. The vulnerability does not require authentication if the sales interface is exposed, but user interaction is necessary to submit manipulated sales requests. No CVSS score has been assigned, and no patches or fixes have been published yet. This vulnerability highlights the importance of validating business logic constraints in web applications, especially those managing critical inventory and financial data.

Detailed information about CVE-2026-30574: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2026-30574: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2026-30574: n/a

Threats Tagged 'cve-2026-30574'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2026-30574'

Lead Pen Test Professional